EX200 Manage users and groups — All Questions With Answers

Question 1hardmultiple choice

Read the full Manage users and groups explanation →

A system administrator needs to ensure that a user named 'bob' can access a shared directory '/data' owned by group 'developers'. The directory has permissions 2775 and is owned by root:developers. Bob is a member of the 'developers' group. However, when Bob tries to create a file in '/data', it fails with 'Permission denied'. What is the most likely cause?

Question 2mediummultiple choice

Read the full Manage users and groups explanation →

A company policy requires that when a user is deleted, all files owned by that user in /home should be reassigned to a 'guest' account. Which command accomplishes this?

Question 3easymultiple choice

Read the full Manage users and groups explanation →

An administrator wants to add the user 'jane' to the supplementary groups 'wheel' and 'docker' without removing her from other groups. Which command should be used?

Question 4hardmultiple choice

Read the full Manage users and groups explanation →

A server has a requirement that all users in the 'finance' group must have a password aging policy that forces password change every 90 days. Which approach best achieves this for existing users?

Question 5mediummulti select

Read the full Manage users and groups explanation →

Which TWO commands can change the primary group of an existing user?

Question 6mediummultiple choice

Read the full Manage users and groups explanation →

Given the exhibit, which statement is true about the file /project/report.txt?

Exhibit

Refer to the exhibit.

[root@server ~]# id alice
uid=1002(alice) gid=1002(alice) groups=1002(alice),10(wheel),50(staff)
[root@server ~]# ls -ld /project
 drwxrws---. 2 root staff 4096 Mar 15 14:22 /project
[root@server ~]# ls -l /project
 total 0
 -rw-rw----. 1 alice staff 0 Mar 15 14:23 report.txt

Question 7hardmultiple choice

Study the full ACL explanation →

You are managing a Red Hat Enterprise Linux 8 server that hosts a shared development environment. The server has a directory /projects owned by root:developers with permissions 2770. There are three users: dev1, dev2, and dev3, all members of the 'developers' group. Developers need to create and edit files in /projects, and any new file should be writable by all members of the developers group. However, you notice that when dev1 creates a file, the permissions are 644 instead of 664, and the group is set to dev1's primary group (dev1) instead of 'developers'. After investigating, you find that the setgid bit is set on /projects, but the directory's ACLs are not configured. What is the most efficient way to ensure that new files in /projects inherit the group 'developers' and have group-writable permissions by default?

Question 8easymultiple choice

Read the full Manage users and groups explanation →

A system administrator needs to ensure that the user 'jdoe' cannot log in via SSH but can still use other services like FTP. Which approach should the administrator take?

Question 9mediummulti select

Read the full Manage users and groups explanation →

Which TWO commands can be used to add the user 'alice' to the supplementary group 'developers'?

Question 10hardmultiple choice

Read the full Manage users and groups explanation →

Refer to the exhibit. A web server runs as user 'apache'. The directory /var/www/html is owned by root:root with permissions 755. The administrator wants to allow the user 'webuser' to upload files to /var/www/html via SFTP. Which step is necessary to achieve this?

Exhibit

Refer to the exhibit.

[root@server ~]# getent passwd webuser
webuser:x:1001:1001:Web User:/home/webuser:/sbin/nologin
[root@server ~]# ls -ld /var/www/html
 drwxr-xr-x. 2 root root 6 Jan 10 10:00 /var/www/html
[root@server ~]# ls -lZ /var/www/html
 drwxr-xr-x. root root unconfined_u:object_r:httpd_sys_content_t:s0 /var/www/html
[root@server ~]# id webuser
 uid=1001(webuser) gid=1001(webuser) groups=1001(webuser)
[root@server ~]# groups webuser
 webuser : webuser

Question 11mediumdrag order

Read the full Manage users and groups explanation →

Arrange the steps to configure a network bond (mode 1) using two interfaces (eth0, eth1) in RHEL.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 12mediummatching

Read the full Manage users and groups explanation →

Match each firewall zone to its default trust level.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Low trust; only allow selected incoming connections

Moderate trust; for private networks

High trust; accept all connections

For publicly accessible systems isolated from internal network

Question 13easymultiple choice

Read the full Manage users and groups explanation →

A company needs to create a user account for a temporary contractor who will work for exactly 90 days. The account must be automatically disabled after 90 days. Which command should the administrator use?

Question 14mediummultiple choice

Read the full Manage users and groups explanation →

A user named jdoe is receiving 'Permission denied' errors when trying to access a file owned by root with permissions 644. The user is a member of the root group. What is the most likely cause?

Question 15hardmultiple choice

Read the full Manage users and groups explanation →

After being added to a new supplementary group with usermod -aG, a user logs out and back in but still cannot access files owned by that group. Which command should the user run to verify current effective group membership?

Question 16easymultiple choice

Read the full Manage users and groups explanation →

A new employee named asmith needs a user account with a home directory and a specific UID of 1500. Which command accomplishes this?

Question 17mediummultiple choice

Read the full Manage users and groups explanation →

A system administrator needs to change the primary group of an existing user to a group that already exists. Which command should be used?

Question 18easymultiple choice

Read the full Manage users and groups explanation →

A server has been compromised, and the administrator suspects an unauthorized user account may have been created. Which file should be examined to list all local user accounts?

Question 19mediummultiple choice

Read the full Manage users and groups explanation →

An administrator wants to ensure that any new user accounts created on the system have a default primary group matching the username. What change is needed?

Question 20hardmultiple choice

Read the full Manage users and groups explanation →

A user reports that they can log in but cannot change their password. Which file might be misconfigured?

Question 21hardmultiple choice

Read the full Manage users and groups explanation →

An administrator used the command useradd -D -f 10 to change the default inactivity period. What effect does this have on future user accounts?

Question 22mediummulti select

Read the full Manage users and groups explanation →

Which TWO commands can be used to add a user to a secondary group without removing existing supplementary group memberships? (Choose exactly 2)

Question 23hardmulti select

Read the full Manage users and groups explanation →

Which THREE statements about /etc/shadow are true? (Choose exactly 3)

Question 24easymulti select

Read the full Manage users and groups explanation →

Which TWO commands can list all groups a user belongs to? (Choose exactly 2)

Question 25mediummultiple choice

Read the full Manage users and groups explanation →

Refer to the exhibit. A user named 'carol' has been added to the system with the command useradd -G wheel carol. Which line in /etc/group will confirm that carol is now a member of the wheel group?

Exhibit

# cat /etc/group
root:x:0:root
bin:x:1:bin,daemon
daemon:x:2:bin,daemon
sys:x:3:root,bin,adm
adm:x:4:root,daemon,adm
tty:x:5:
disk:x:6:root
lp:x:7:daemon,lp
mem:x:8:
kmem:x:9:
wheel:x:10:root,alice,bob
ssh_keys:x:101:
sshd:x:74:
alice:x:1001:
bob:x:1002:

Question 26hardmultiple choice

Read the full Manage users and groups explanation →

Refer to the exhibit. What effect does the value INACTIVE=-1 have on newly created user accounts?

Exhibit

# useradd -D
GROUP=100
HOME=/home
INACTIVE=-1
EXPIRE=
SHELL=/bin/bash
SKEL=/etc/skel
CREATE_MAIL_SPOOL=yes

Question 27hardmultiple choice

Read the full Manage users and groups explanation →

Refer to the exhibit. A user bob exists with UID 1002 and GID 1002. The /etc/group shows a group bob with GID 1002 but no members listed. Bob tries to access a file owned by group 'bob' with permissions 640 and owner root. What will happen?

Exhibit

# grep ^^bob /etc/passwd /etc/shadow /etc/group
/etc/passwd:bob:x:1002:1002:Bob Smith:/home/bob:/bin/bash
/etc/shadow:bob:$6$abc123$...:18000:0:99999:7:::
/etc/group:bob:x:1002:

Question 28mediummultiple choice

Read the full Manage users and groups explanation →

A system administrator needs to ensure that a user named 'jdoe' can execute commands as root without being prompted for a password. Which configuration change should be made?

Question 29easymultiple choice

Read the full Manage users and groups explanation →

A user reports they cannot log in to a Linux system. Their account was recently created. The administrator checks /etc/passwd and sees the entry: jsmith:x:1001:1001::/home/jsmith:/sbin/nologin. What is the likely issue?

Question 30hardmultiple choice

Read the full Manage users and groups explanation →

An administrator is migrating user accounts to a new system. They want to preserve the user's primary group name and GID. Which commands should be used in sequence?

Question 31easymultiple choice

Read the full Manage users and groups explanation →

A helpdesk ticket states that user 'bob' cannot write to his own home directory. The directory /home/bob has permissions drwxr-xr-x and is owned by root:root. What command will fix this?

Question 32mediummultiple choice

Read the full Manage users and groups explanation →

An administrator needs to create a user account that will be used by an application service. The account should not have a valid shell or home directory. Which command correctly creates such an account?

Question 33easymultiple choice

Read the full Manage users and groups explanation →

During an audit, it is discovered that a critical file /etc/shadow has permissions 644 and is owned by root:shadow. The administrator needs to secure it. What is the correct action?

Question 34easymultiple choice

Read the full Manage users and groups explanation →

An administrator wants to modify the default expiration settings for new user passwords. Which file should be modified?

Question 35mediummultiple choice

Read the full Manage users and groups explanation →

A user 'carol' is in group 'staff'. The directory /shared has permissions drwxrwx--- and group staff. Carol can create files but cannot delete other users' files. What is missing?

Question 36hardmultiple choice

Read the full Manage users and groups explanation →

An administrator accidentally deleted the group 'sales' which is the primary group of several users. What is the immediate effect on those users?

Question 37mediummulti select

Read the full Manage users and groups explanation →

Which TWO of the following are valid methods to set a user's password expiration date?

Question 38easymulti select

Read the full Manage users and groups explanation →

Which TWO commands can be used to add a user to an existing supplementary group without removing them from other groups?

Question 39hardmulti select

Read the full Manage users and groups explanation →

Which THREE conditions must be met for a user to effectively use the 'sudo' command to execute commands with root privileges?

Question 40mediummultiple choice

Read the full Manage users and groups explanation →

A user jdoe, who is a member of the group staff, reports they cannot access the directory /shared. The administrator runs getfacl /shared and receives the output shown. Which of the following explains the issue?

Exhibit

Refer to the exhibit.

[exhibit]
getfacl /shared
# file: shared
# owner: root
# group: staff
user::rwx
user:jdoe:---
group::rwx
mask::rwx
other::---

[/exhibit]

Question 41hardmultiple choice

Read the full Manage users and groups explanation →

Alice tries to run 'sudo less /var/log/messages' and gets 'Sorry, user alice is not allowed to execute /usr/bin/less /var/log/messages as root on this host.' Why?

Exhibit

Refer to the exhibit.

[exhibit]
[sudo -l output for user alice]
Matching Defaults entries for alice on this host:
    !visiblepw, always_set_home, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS",
    env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE",
    env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES",
    env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE",
    env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY",
    secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin

User alice may run the following commands on this host:
    (root) /usr/bin/less /var/log/secure
    (root) /usr/bin/tail /var/log/messages

[/exhibit]

Question 42hardmultiple choice

Read the full Manage users and groups explanation →

Your organization has a shared directory /data/projects with permissions 2770 owned by root:projectmanagers. The directory is used by a team of developers who are all members of the 'developers' group. However, you need to ensure that any file created inside /data/projects automatically belongs to the 'developers' group, not the user's primary group. Additionally, you need to ensure that developers can delete only their own files, not those of others. Your IT security policy also requires that all user passwords must expire every 90 days and that new users should have a warning period of 7 days before expiration. Given the following options, which one describes the correct set of actions to achieve all these requirements?

Question 43mediummulti select

Read the full Manage users and groups explanation →

A system administrator needs to ensure that the user 'jdoe' can read files in the shared directory /project/data which is owned by group 'project'. The user 'jdoe' is currently not a member of the 'project' group. Which TWO steps should the administrator take to add 'jdoe' to the 'project' group? (Choose two.)

Question 44easymultiple choice

Read the full Manage users and groups explanation →

You are a junior administrator at a company that uses Red Hat Enterprise Linux 8. The HR department has a shared directory /hr/data that should be accessible to all members of the 'hr' group. The directory is currently owned by root:root with permissions 755. You need to configure the system so that new files created in /hr/data are automatically owned by the group 'hr' and the group has read-write permissions. Additionally, you need to ensure that user 'jane' (who is a member of 'hr') can create files in the directory. However, after adding 'jane' to the 'hr' group, she still cannot create files, receiving 'Permission denied'. Which of the following is the best course of action to resolve this issue?

Question 45hardmultiple choice

Read the full Manage users and groups explanation →

A Red Hat Enterprise Linux 9 system enforces a security policy that user accounts must be disabled after 90 days of inactivity. The system administrator has configured /etc/shadow accordingly with the proper fields. User 'bob' has been on leave for 95 days. When bob returns and tries to log in, he is unable to do so. The administrator checks the shadow file and sees that bob's password expiration date has passed and the account is locked due to inactivity (the inactivity period has exceeded). The administrator wants to immediately reactivate bob's account without changing the password, and also wants to set the account to expire in 30 days from now (relative to the current date). Which set of commands should the administrator run to achieve this goal?

Question 46easymulti select

Read the full Manage users and groups explanation →

Which TWO commands can be used to create a new user account in Red Hat Enterprise Linux 8?

Question 47mediummultiple choice

Read the full Manage users and groups explanation →

A user was recently added to the 'testgrp' group using `usermod -aG testgrp user1`. However, when they try to access a file owned by testgrp with permissions 660, they get permission denied. What is the most likely reason?

Exhibit

Refer to the exhibit.

$ id user1
uid=1000(user1) gid=1000(user1) groups=1000(user1),10(wheel)

Question 48hardmultiple choice

Read the full Manage users and groups explanation →

You are managing a Red Hat Enterprise Linux 8 server that hosts backup scripts. A user named 'backup' (UID 1005) is a member of the 'backup' group. The directory /var/backups is owned by root:backup with permissions 775. The 'backup' user needs to create files in this directory. However, when the user attempts to create a file, they receive 'Permission denied'. You verify that 'backup' is indeed listed in the backup group in /etc/group. The user's current shell was started after their last login. Which of the following is the most likely cause and solution?

Refer to the exhibit. [root@server ~]# id alice uid=1002(alice) gid=1002(alice) groups=1002(alice),10(wheel),50(staff) [root@server ~]# ls -ld /project drwxrws---. 2 root staff 4096 Mar 15 14:22 /project [root@server ~]# ls -l /project total 0 -rw-rw----. 1 alice staff 0 Mar 15 14:23 report.txt

Refer to the exhibit. [root@server ~]# getent passwd webuser webuser:x:1001:1001:Web User:/home/webuser:/sbin/nologin [root@server ~]# ls -ld /var/www/html drwxr-xr-x. 2 root root 6 Jan 10 10:00 /var/www/html [root@server ~]# ls -lZ /var/www/html drwxr-xr-x. root root unconfined_u:object_r:httpd_sys_content_t:s0 /var/www/html [root@server ~]# id webuser uid=1001(webuser) gid=1001(webuser) groups=1001(webuser) [root@server ~]# groups webuser webuser : webuser

# cat /etc/group root:x:0:root bin:x:1:bin,daemon daemon:x:2:bin,daemon sys:x:3:root,bin,adm adm:x:4:root,daemon,adm tty:x:5: disk:x:6:root lp:x:7:daemon,lp mem:x:8: kmem:x:9: wheel:x:10:root,alice,bob ssh_keys:x:101: sshd:x:74: alice:x:1001: bob:x:1002:

Refer to the exhibit. [exhibit] [sudo -l output for user alice] Matching Defaults entries for alice on this host: !visiblepw, always_set_home, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin User alice may run the following commands on this host: (root) /usr/bin/less /var/log/secure (root) /usr/bin/tail /var/log/messages [/exhibit]